This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft File: aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft (raw, json) Hash identifier: bxn+rWLA/fMHb00g2YU6o18MLqccMJxs4kWrgwc0Usc= Subject key identifier: 7F:D4:32:53:03:D6:8B:50:AC:D4:09:AF:50:C5:F9:2F:3E:64:59:67 Authority key identifier: 68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52 Certificate issuer: /CN=A91DCAE8/serialNumber=684597E998A3A0C6987361B7C572043A816C1C52 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft Manifest number: 27 Signing time: Fri 16 Jan 2026 14:42:42 +0000 Manifest this update: Fri 16 Jan 2026 14:42:42 +0000 Manifest next update: Fri 23 Jan 2026 14:42:42 +0000 Files and hashes: 1: aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl (hash: XH6WJFEDKMNh6qOK3DemzvFzY4/2yGKWmH3hXqI7CBE=) 2: 12E8FD5CBECC11F098CFE015C4F9AE02.roa (hash: ZnOlNoLSibfq3/qIsrDbM5RZVyIuk7cWs+48nm4czSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 14:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8, serialNumber=684597E998A3A0C6987361B7C572043A816C1C52 Validity Not Before: Jan 16 14:42:42 2026 GMT Not After : Jan 23 14:42:42 2026 GMT Subject: CN=696a4e62-8daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fa:97:e5:cf:90:13:3f:96:2d:42:b9:76:e4: 5f:ef:c8:58:27:4e:99:2e:6c:9f:b6:d1:91:ac:9a: 87:00:58:b5:f1:01:d9:1b:23:5a:35:88:aa:74:29: 26:36:1b:f5:54:08:6d:0f:0a:f6:28:58:8a:b6:b5: 92:ec:bb:c2:90:0b:03:f5:be:a6:62:16:28:60:de: 20:29:bd:8b:da:48:5f:41:f1:9b:4e:2f:47:44:87: c2:54:2d:15:a3:0c:ff:7f:c8:d4:7e:02:02:9f:b1: 4c:3d:0a:a8:dc:b8:62:c7:5d:62:82:38:90:c4:24: 4f:8e:63:3e:89:02:21:44:30:b5:d3:b0:79:ec:84: 88:2b:65:1d:65:c1:78:c7:8e:88:94:ac:0b:90:0f: cc:15:d9:a4:c5:6f:41:06:c5:a7:04:5c:22:21:c3: 1a:bd:b0:80:8f:bb:c0:4f:f5:4b:d6:b3:c6:8f:40: 6e:07:3e:6b:7a:3b:20:af:a0:02:a7:90:82:c2:54: 2f:86:fe:35:c5:2e:b7:23:6e:d4:6a:ef:6a:57:ca: 7d:5c:45:1e:51:a9:de:7c:24:2d:b9:78:32:e7:59: af:f2:8e:cf:57:ed:77:fa:7b:49:06:09:36:81:74: 1c:1e:05:b2:9e:a2:d9:82:9e:49:c2:cf:14:3e:e5: 82:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D4:32:53:03:D6:8B:50:AC:D4:09:AF:50:C5:F9:2F:3E:64:59:67 X509v3 Authority Key Identifier: keyid:68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:a5:fe:91:e5:35:e2:a9:39:23:f2:da:7b:84:78:f9:92:90: 2e:14:d3:49:04:fa:4d:13:12:04:76:1d:44:fa:a1:36:c0:24: 5a:f8:1c:59:a2:b1:1a:03:2d:3d:9a:48:61:5a:36:22:ec:38: b2:19:b4:07:c3:27:32:6e:4a:e8:cf:9b:18:af:55:9e:e3:dc: f3:9b:68:18:35:4a:7c:ba:9e:b9:39:35:ed:22:04:52:41:ca: 68:1f:7c:0a:ce:4d:8a:e0:32:62:ef:9f:fa:8d:b5:c9:de:f5: 6b:8f:94:0c:e6:6b:01:7e:83:00:50:e4:34:1e:5d:1d:05:dd: 52:a5:cd:13:6a:2e:ed:0b:00:ce:c4:c6:fa:50:f8:32:71:02: 9f:2d:0f:de:89:8e:29:0c:5a:6c:b1:04:43:ef:f4:dd:55:3a: dc:12:aa:da:f0:dc:16:d5:8d:18:03:04:55:8c:6c:40:14:a3: e5:73:05:15:d5:28:72:3a:9c:7e:8b:65:3d:be:bf:43:e7:7d: d1:9e:ea:5e:77:00:5d:9e:85:0d:08:c8:c4:e1:f9:72:29:67: 6e:f7:c6:5e:e8:ec:27:3d:a6:d4:28:e9:4a:0b:ad:e1:ed:c1: 7e:8e:5d:12:27:1d:4a:9a:86:1b:a4:8d:36:f5:8c:68:c3:76: 78:3d:19:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Q0FFODExMC8GA1UEBRMoNjg0NTk3RTk5OEEzQTBDNjk4NzM2MUI3QzU3MjA0M0E4 MTZDMUM1MjAeFw0yNjAxMTYxNDQyNDJaFw0yNjAxMjMxNDQyNDJaMBgxFjAUBgNV BAMMDTY5NmE0ZTYyLThkYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDl+pflz5ATP5YtQrl25F/vyFgnTpkubJ+20ZGsmocAWLXxAdkbI1o1iKp0KSY2 G/VUCG0PCvYoWIq2tZLsu8KQCwP1vqZiFihg3iApvYvaSF9B8ZtOL0dEh8JULRWj DP9/yNR+AgKfsUw9CqjcuGLHXWKCOJDEJE+OYz6JAiFEMLXTsHnshIgrZR1lwXjH joiUrAuQD8wV2aTFb0EGxacEXCIhwxq9sICPu8BP9UvWs8aPQG4HPmt6OyCvoAKn kILCVC+G/jXFLrcjbtRq72pXyn1cRR5Rqd58JC25eDLnWa/yjs9X7Xf6e0kGCTaB dBweBbKeotmCnknCzxQ+5YKDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUf9QyUwPW i1Cs1AmvUMX5Lz5kWWcwHwYDVR0jBBgwFoAUaEWX6ZijoMaYc2G3xXIEOoFsHFIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDQUU4LzNGN0UyNTc0QkUw NzExRjA5RkYwNDQ2OUM0RjlBRTAyL2FFV1g2Wmlqb01hWWMyRzN4WElFT29Gc0hG SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYUVXWDZaaWpvTWFZYzJHM3hYSUVPb0ZzSEZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD QUU4LzNGN0UyNTc0QkUwNzExRjA5RkYwNDQ2OUM0RjlBRTAyL2FFV1g2Wmlqb01h WWMyRzN4WElFT29Gc0hGSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKul/pHlNeKpOSPy2nuEePmSkC4U00kE+k0TEgR2HUT6oTbAJFr4HFmi sRoDLT2aSGFaNiLsOLIZtAfDJzJuSujPmxivVZ7j3PObaBg1Sny6nrk5Ne0iBFJB ymgffArOTYrgMmLvn/qNtcne9WuPlAzmawF+gwBQ5DQeXR0F3VKlzRNqLu0LAM7E xvpQ+DJxAp8tD96JjikMWmyxBEPv9N1VOtwSqtrw3BbVjRgDBFWMbEAUo+VzBRXV KHI6nH6LZT2+v0PnfdGe6l53AF2ehQ0IyMTh+XIpZ273xl7o7Cc9ptQo6UoLreHt wX6OXRInHUqahhukjTb1jGjDdng9GXI= -----END CERTIFICATE-----Generated at Sun Jan 18 03:11:04 2026 by rpki-client